diff options
| author | Mark H Weaver <mhw@netris.org> | 2024-11-28 13:04:52 -0500 |
|---|---|---|
| committer | Mark H Weaver <mhw@netris.org> | 2024-11-28 17:52:11 -0500 |
| commit | 634b1e3f42f59472f70a724a2e1559f15e136e9d (patch) | |
| tree | a50688ba708d6af87f99f9948fb7a8f6f8f35080 | |
| parent | cf16dcb95fee602fa2cd3377de769c57a123f9c1 (diff) | |
| download | guix-634b1e3f42f59472f70a724a2e1559f15e136e9d.tar.gz guix-634b1e3f42f59472f70a724a2e1559f15e136e9d.zip | |
gnu: icecat: Update to 115.18.0-guix2 [security fixes].
Includes fixes for CVE-2024-11692, CVE-2024-11693, and CVE-2024-11697.
* gnu/packages/gnuzilla.scm (%icecat-version, %icecat-build-id): Update.
(icecat-source): Update gnuzilla commit and hash.
| -rw-r--r-- | gnu/packages/gnuzilla.scm | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/gnu/packages/gnuzilla.scm b/gnu/packages/gnuzilla.scm index 0ffc6f95c4..0b7523c934 100644 --- a/gnu/packages/gnuzilla.scm +++ b/gnu/packages/gnuzilla.scm @@ -534,8 +534,8 @@ variable defined below. It requires guile-json to be installed." (define computed-origin-method (@@ (guix packages) computed-origin-method)) (define %icecat-base-version "115.18.0") -(define %icecat-version (string-append %icecat-base-version "-guix1")) -(define %icecat-build-id "20241126000000") ;must be of the form YYYYMMDDhhmmss +(define %icecat-version (string-append %icecat-base-version "-guix2")) +(define %icecat-build-id "20241127000000") ;must be of the form YYYYMMDDhhmmss ;; 'icecat-source' is a "computed" origin that generates an IceCat tarball ;; from the corresponding upstream Firefox ESR tarball, using the 'makeicecat' @@ -560,7 +560,7 @@ variable defined below. It requires guile-json to be installed." ;; The upstream-icecat-base-version may be older than the ;; %icecat-base-version. (upstream-icecat-base-version "115.18.0") - (gnuzilla-commit "21732b4ee88ac55f266cc1e83f2c98514eba9ae9") + (gnuzilla-commit "dc99e15355412bc9b11b34d3fe5729bed1c251de") (gnuzilla-source (origin (method git-fetch) @@ -572,7 +572,7 @@ variable defined below. It requires guile-json to be installed." (string-take gnuzilla-commit 8))) (sha256 (base32 - "0qqwa0gpv0v61mf7rkrv2sn2z2jrfaa4akgdmf5blfsa9yv8xz79")))) + "0syzjvgc93mwxnqh5k2cr080r6932j7q7y6ar865f9z2d3lj2vg0")))) ;; 'search-patch' returns either a valid file name or #f, so wrap it ;; in 'assume-valid-file-name' to avoid 'local-file' warnings. |